1. Data Controller
TechSci is operated by Sayem Abdullah Rihan. For all privacy-related inquiries, reach us at hello@techsci.xyz.
2. Data We Collect
- Contact information: Name, email address, phone number, and company name submitted through our contact form.
- Account data: Email, name, and authentication data when you register via Clerk.
- Payment information: Processed securely by Whop — we do not store card numbers or banking details.
- Purchase history: Products and services you've purchased through our platform.
- Analytics data: Anonymized usage patterns collected via Vercel Analytics.
- Technical data: IP address (anonymized), browser type, device type, and referral source.
3. How We Use Your Data
- Service delivery: Managing CRO audits, reports, and communications through the client portal.
- Communication: Responding to contact form submissions, project updates, and support tickets.
- Payment processing: Processing payments through Whop.
- Email communications: Order confirmations, report delivery notifications, and service updates via Resend.
- Site improvement: Analyzing anonymized usage data to improve our website and services.
- Security: Protecting your account and our infrastructure from unauthorized access.
4. Third-Party Services
We use the following third-party services. Each has its own privacy policy:
- Whop — Payment processing and membership management
- Clerk — User authentication and identity management
- Neon — Serverless PostgreSQL database hosting
- Resend — Transactional email delivery
- Upstash — Rate limiting and Redis caching
- Cloudflare Turnstile — Bot protection on contact forms
- Vercel — Website hosting and analytics
5. Cookies
We use essential cookies for authentication (Clerk session tokens) and functional cookies for theme preferences (light/dark mode). We do not use advertising or third-party tracking cookies. Vercel Analytics provides privacy-friendly, cookieless analytics.
6. Data Retention
- Active client data: Retained for the duration of our business relationship plus 7 years for tax and legal compliance.
- Contact form submissions: Retained for up to 3 years unless you request earlier deletion.
- Account data: Retained until you request account deletion, after which data is purged within 30 days.
7. Your Rights
Depending on your jurisdiction, you may have the following rights:
GDPR Rights (EU/EEA Residents):
- Right to access, rectify, and erase your personal data
- Right to restrict or object to processing
- Right to data portability
- Right to withdraw consent at any time
CCPA/CPRA Rights (California Residents):
- Right to know what personal data is collected
- Right to request deletion of your data
- Right to opt out of the sale of personal data
- Right to non-discrimination for exercising your rights
We do not sell your personal data. Contact hello@techsci.xyz to exercise your rights. We respond within 30 days.
8. International Data Transfers
Your data may be processed in the United States, European Union, and Bangladesh through our service providers. We ensure appropriate safeguards for all international transfers.
9. Changes to This Policy
We may update this policy from time to time. Changes are posted on this page with an updated date. Continued use of our services after changes constitutes acceptance.